Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Want to see what's currently in public preview? We've pulled it all together in one place. Check it out here
cancel
Showing results for 
Search instead for 
Did you mean: 
varajpmc0816
Contributor III
Contributor III

Active Directory in Section Access with Data Reduction

Hi,

 

I need a solution on below query in Section Access and Section Application

 

How to restrict users at Data reduction level in Section Access who are part of Active Directory Group (AD\xyz-DEV) which AD group is added in section access script

Ex :

Section Access;


Privileges:

LOAD * INLINE [
ACCESS, USERID, %AUTH_ID, ORG_LVL_Granted, ACCESS FULL COST, OBJECT_GROUP, GROUP
ADMIN, INTERNAL\SA_SCHEDULER, *, *, *, *, *
USER, *, *, *, *, *, 'CN=AD\xyz-DEV,OU=Groups,OU=abc,DC=AD,DC=xyzabc,DC=com'
];

Concatenate


Privileges:


LOAD
'USER' as ACCESS,
upper(USERID) as USERID,
upper("ORG_LVL") & '|' & upper("REGION") & '|' & UPPER(Subfield (DATASOURCEID,'-')) as %AUTH_ID,
ORG_LVL_Granted,
IF (ORG_LVL='<ANY>' and REGION='<ANY>',1,0) as [ACCESS FULL COST],
if (Len([OBJECT_GROUP]) = 0,'GROUP0', OBJECT_GROUP) as OBJECT_GROUP,
'*' as GROUP,
OMIT_GROUP;

Section Application;

 

Example :

 %AUTH_ID = 12345|Any|Any

 

Current Scenario :
Where %AUTH_ID is a link key and concatenated with above Privileges table currently which is combination is org_lvl, Region and Data Source ID level
The link key (%AUTH_ID) is connected with fact table in the data model for data reduction

Now, we don't want Users table and we can use only section access with active directory

New Scenario : 
How to do data reduction in section access with active directory as per existing scenario but make sure don't use any other table (Ex: users) which is concatenated with inline table (where active directory is implemented)?

 

Regards,

Vara

Labels (2)
0 Replies